Yeah, completely valid criticism. It's encrypted before actually saving it to the DB but it's not encrypted end-to-end. I'll remove it from the website.